In addition to providing an audit trail required by auditors, logging can be used to

A.
provide backout and recovery information

B.
prevent security violations

C.
provide system performance statistics

D.
identify fields changed on master files.

Explanation:
Auditing tools are technical controls that track activity within a network on a network device or on a
specific computer. Even though auditing is not an activity that will deny an entity access to a
network or computer, it will track activities so a network administrator can understand the types of
access that took place, identify a security breach, or warn the administrator of suspicious activity.
This can be used to point out weakness of their technical controls and help administrators
understand where changes need to be made to preserve the necessary security level within the
environment. . – Shon Harris All-in-one CISSP Certification Guide pg 179-180